← All advisories

High severity7.5NVD Advisory· Published May 6, 2026· Updated May 11, 2026

CVE-2026-43101

CVE-2026-43101

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

We need to check __in6_dev_get() for possible NULL value, as suggested by Yiming Qian.

Also add skb_dst_dev_rcu() instead of skb_dst_dev(), and two missing READ_ONCE().

Note that @dev can't be NULL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14

Linux/Kernel8 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15,<6.18.24
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
osv-coords6 versions
pkg:apk/chainguard/linux-aws-6.18 pkg:apk/chainguard/linux-azure-6.18 pkg:apk/chainguard/linux-gcp-6.18 pkg:apk/chainguard/linux-qemu-6.18 pkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installed pkg:apk/chainguard/linux-vmware-6.18
< 6.18.31-r0+ 5 more
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0

Patches

Vulnerability mechanics

References

3

News mentions

1

Patch Tuesday - May 2026
Rapid7 Blog · May 13, 2026